CVE-2008-3177: Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for U...

Security readout for executives and security teams

This is a denial-of-service flaw in Sophos virus detection engine 2.75 on Linux and Unix. A remote sender could crash the scanning engine by sending email content with zero-length MIME attachments. The sources do not indicate data theft, code execution, or confirmed active exploitation. Exposure is most likely in legacy Sophos mail-scanning or SAVI deployments still running engine 2.75 on Linux or Unix. Modern, upgraded, or retired deployments may not be affected, but the bundle does not provide version-fixed details. Treat this as a resilience issue for legacy email security infrastructure. It is not sourced as code execution or active exploitation, but a crash in mail scanning can disrupt security controls and mail handling. Mitigation focus: Identify any Sophos engine 2.75 deployments on Linux or Unix.; Check Sophos knowledgebase article 42245 for vendor-stated remediation.; Prioritize vendor-supported upgrade or retirement for affected legacy deployments..

Prepared

Jun 28, 2026, 18:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.